Protect Your SharePoint Data with Quantum-Safe Encryption

SharePoint manages who can open a file inside the corporate perimeter. It does not encrypt the documents at the file level, it does not follow a file once it syncs to a personal PC, and it does not stop a tenant administrator from opening it. Access control and encryption are not the same protection.

Connector is the FileGrant extension that encrypts files directly inside SharePoint and OneDrive, with no migration. Documents stay where they are, users keep their Microsoft login and workflow, and each file opens only on authorized devices. Protection lives in the file, so it does not depend on the individual user and does not end when the file leaves SharePoint.

Connector + FileGrant: file-centric encryption, now inside SharePoint.

Connector encrypts your files where they already live, on SharePoint and OneDrive, with the same Microsoft interface, the same permissions, and zero migration. The core stays FileGrant, which now opens and protects SharePoint documents too. For local editing, RemoteGrant handles decryption transparently. Connector adds an encryption layer on top of the Microsoft 365 stack you already run, so it complements SharePoint rather than replacing it.

HOW IT WORKS

Encrypt, open, control. Without changing how people work.

Encrypt files where they already are

You choose the scope, an entire SharePoint site or a single folder. Connector encrypts every file automatically and leaves it in place on SharePoint. No data is moved and no new repository is created.

Open with the Microsoft login

Users open documents the way they do each day: in the browser with "Open with FileGrant," or locally with RemoteGrant. They authenticate with their existing Microsoft 365 login, so there is no second password and no new interface to learn.

Control access by device

An encrypted file opens only on an authorized company device. A user can download it to a personal or home PC, but on an unmanaged device the file will not open.

TRANSPARENT ENCRYPTION

Automatic, quantum-safe encryption for every SharePoint file

Connector encrypts every file uploaded to the selected SharePoint site or folder automatically, with nothing for the user to do. The Microsoft permissions you built over the years stay exactly as they are, so you keep who-sees-what without reconfiguration. Encryption is quantum-safe: FileGrant Lock&Go uses CRYSTALS-Kyber, the algorithm NIST standardized as FIPS 203 (ML-KEM) to counter harvest-now-decrypt-later attacks.

INTEROPERABILITY

Encrypt non-Office files that Microsoft Purview leaves unprotected

Microsoft Purview applies sensitivity labels and encryption mainly to Office formats and PDF. Connector encrypts any file type, including PSD, AutoCAD, JPEG, and TXT, and lets you open and edit each one in its native app (Photoshop, Notepad, Acrobat) without changing the extension. Connector runs on top of your Microsoft 365 stack, so it complements Purview and SharePoint rather than replacing them.

AI PROTECTION

No AI can read your encrypted files, not even Copilot

Copilot and other AI assistants index the documents on SharePoint to answer users. On a file encrypted by Connector they see only ciphertext and metadata, never the readable content. The same holds outside the tenant, thanks to FileGrant: the file stays encrypted wherever it is copied, forwarded, or uploaded, so no AI system (Copilot, ChatGPT, or anything else) can read what is inside. A document that leaves encrypted never feeds a model. non finisce in nessun modello.

ACCESS CONTROL

Files open only on authorized company devices, not on personal PCs

Connector ties file access to the device, not only to the user identity. Even with valid Microsoft 365 credentials, an encrypted file will not open on an unmanaged or personal device. The tenant administrator cannot read the documents either, because the encryption keys stay with your company (zero-knowledge). When a file is shared externally it leaves encrypted, and the screenshot and copy-paste blocks it inherits from FileGrant travel with it.

DEPLOYMENT

Deploy on your existing Microsoft 365 tenant, with no data migration

You turn Connector on inside the Microsoft 365 tenant you already use, over your existing SharePoint structure. Sites and folders stay where they are, with no new repository and no data migration. There are no user-side installs and no extra server to manage. You set the scope, switch on encryption, and daily work continues unchanged.

Even if attackers get into SharePoint, Connector leaves them empty-handed.

CyberGrant Connector puts FileGrant encryption inside SharePoint itself. If an attacker breaks in with phished credentials, every document is already encrypted, so nothing opens. They can exfiltrate the files, but what they take is unreadable.

Read How to encrypt SharePoint files without replacing it or migrating

Connector keeps your SharePoint files encrypted and unreadable, anywhere.

Protect Your SharePoint Data with Quantum-Safe Encryption

Over 400 organizations were breached through a single SharePoint vulnerability in 2025.

Connector + FileGrant: file-centric encryption, now inside SharePoint.

Encrypt, open, control. Without changing how people work.

Automatic, quantum-safe encryption for every SharePoint file

Open encrypted SharePoint files in the browser, with your Microsoft login

Open and edit encrypted files locally, with no copy left behind

Encrypt non-Office files that Microsoft Purview leaves unprotected

No AI can read your encrypted files, not even Copilot

Files open only on authorized company devices, not on personal PCs

Deploy on your existing Microsoft 365 tenant, with no data migration

Even if attackers get into SharePoint, Connector leaves them empty-handed.

Book a free consultation

Inside Cybersecurity: trend, innovazione e aggiornamenti

How to encrypt SharePoint files without replacing it or migrating

Cyber compliance after August 2, 2026 : why it comes down to the data

Beyond the Perimeter: file-centric DLP | CyberGrant